Privacy Policy

1. Introduction

Cognita ("we", "us", "our") is an online AI development education provider operated from 63/2 Nimmanhaemin Soi 9, Su Thep, Mueang Chiang Mai, Chiang Mai 50200, Thailand. We take the handling of personal data seriously and aim to be straightforward about what we collect and why.

This policy describes how Cognita collects, uses, stores, and protects personal data in connection with its courses, website, and communications. It applies to anyone who visits our website at cognitak.world, enquires about a course, or enrols as a learner.

For questions about this policy, contact us at [email protected].

2. Data We Collect

2.1 Information you provide directly

• Full name and email address (from the contact form or enrolment)
• Phone number (if provided voluntarily)
• Message content submitted via the contact form
• Course-related submissions, project files, and feedback exchanges

2.2 Information collected automatically

• Browser type and operating system
• Pages visited and time spent on each page
• Referring URL
• Approximate geographic location (country/city level only)

2.3 Legal basis for processing (PDPA — Thailand)

We process personal data under the following bases permitted by Thailand's Personal Data Protection Act B.E. 2562 (2019):

• Contractual necessity — to deliver the course you enrolled in
• Legitimate interests — to improve our courses and website
• Consent — for optional marketing communications (which you may withdraw at any time)

2.4 Retention periods

• Enquiry and contact form data: 12 months from last interaction
• Learner enrolment and project data: 3 years from course completion
• Website analytics data: 26 months (standard analytics retention)

3. How We Use Your Data

• To respond to your enquiries and process course enrolments
• To deliver course materials, project feedback, and mentor communications
• To issue completion records at the end of a course
• To send course-related updates (schedule changes, new cohort openings) where you have a legitimate interest or have provided consent
• To analyse website traffic and improve content using anonymised analytics data
• To comply with applicable Thai law and respond to lawful requests from authorities

3.1 Third-party sharing

We do not sell personal data to third parties. We may share data with:

• Hosting and infrastructure providers (for website operation)
• Analytics services (anonymised, aggregated data only)
• Payment processors (if applicable, for processing course fees securely)

All third parties we use are required to handle data in a manner consistent with this policy and applicable law.

4. How We Protect Your Data

• Website served over HTTPS with TLS encryption
• Access to learner data restricted to Cognita staff with a direct need
• Data stored on servers in the Asia-Pacific region
• Internal access reviewed and updated when staff roles change
• In the event of a data breach that affects your personal data, we will notify you within 72 hours where feasible and as required by the PDPA

5. Cookies

Our website uses cookies to support functionality and understand usage. We use essential cookies (required for the site to work), analytics cookies (to understand page traffic, with your consent), and preference cookies (to remember settings you have chosen).

You can manage your cookie preferences at any time via our Cookie Policy page. Declining non-essential cookies will not affect your ability to use the website or enrol in courses.

6. Your Rights Under PDPA

Thailand's Personal Data Protection Act gives you the following rights regarding data we hold about you:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete data
• Right to erasure — request deletion of your data where we no longer have a lawful basis to hold it
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent for optional processing at any time without affecting prior processing
• Right to lodge a complaint — with Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have been infringed

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website and course materials may contain links to external websites. We are not responsible for the privacy practices of those sites. We recommend you read their privacy policies before providing any personal information.

8. Children's Privacy

Our courses are intended for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal information, please contact us immediately at [email protected] and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify active learners by email. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions, requests to exercise your rights, or concerns about how we handle your data: